$ rpki-client -vvf repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft File: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft (raw, json) Hash identifier: odt24kxRc7vl49E6RJiMbnMIKKnB2Hb/ntruYga3NqA= Subject key identifier: EC:FF:F6:3B:EC:8B:14:C0:6C:7C:C2:FB:4B:FC:51:F0:E7:3B:61:3D Authority key identifier: EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 Certificate issuer: /CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Certificate serial: 10E2D701452E3053C6C2F72774DD5CBC01DCBAEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft Manifest number: 01AA Signing time: Mon 30 Jun 2025 23:31:17 +0000 Manifest this update: Mon 30 Jun 2025 23:26:17 +0000 Manifest next update: Fri 04 Jul 2025 07:45:17 +0000 Files and hashes: 1: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: RJCqubu8qbtGpPN7MXXSa7nQdF5Bw0374TSVNQhH0cg=) 2: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: ksIEFNaSzeLI+q7xZzyqipfYLMI/o1zxI631Se0BC2U=) 3: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: zhfT9dzqYt1bB25St2DI6pASSgOwxgdrMpQzPwr4zdA=) 4: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl (hash: GYcixVq4y01V8VqL2ZpIzBEnybXClaMXw99/8oyXcyA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 07:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e2:d7:01:45:2e:30:53:c6:c2:f7:27:74:dd:5c:bc:01:dc:ba:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Validity Not Before: Jun 30 23:26:17 2025 GMT Not After : Jul 4 07:45:17 2025 GMT Subject: CN=ECFFF63BEC8B14C06C7CC2FB4BFC51F0E73B613D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9d:a0:d3:fa:2a:ca:ea:77:09:01:17:95:6e: 50:9a:be:a2:37:03:56:0d:9c:60:98:3b:7b:9a:73: 0d:77:46:87:3c:c8:96:be:39:b6:b7:b0:99:17:b5: dd:e5:64:f4:f3:bf:d7:3b:72:e9:7d:cd:cc:14:a4: ee:b8:05:f0:c0:b6:29:2c:64:bb:63:20:69:ee:47: c9:5d:43:9b:06:b7:1b:8b:7b:39:06:c4:dd:d4:1e: e4:83:65:ed:e0:3f:28:cc:12:78:e0:cf:ff:fd:b2: 62:a8:73:19:71:c5:2f:84:67:0f:9b:44:8b:9f:da: 34:04:43:fb:c5:ff:be:cb:27:10:b5:ea:ba:8e:66: 10:82:d2:99:ad:43:f9:f6:ed:2b:08:eb:5c:05:5a: c9:7f:5f:ad:83:be:4e:fc:44:bc:f1:dc:55:e7:a4: 0a:70:79:a8:0b:a6:7a:88:1e:81:30:90:c4:b9:1a: 3a:0e:01:56:93:94:9a:1b:09:f5:53:f8:32:f5:7d: 9d:7e:df:8d:d2:50:e5:de:f5:28:df:df:ee:3c:bf: ae:df:a0:81:be:0c:3d:2f:c2:ba:0c:50:a6:77:c9: 86:8b:83:0b:2c:33:f1:43:7b:08:96:af:f8:92:7c: 59:50:1f:43:15:4d:28:72:d0:2a:d9:4b:00:1a:64: 32:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FF:F6:3B:EC:8B:14:C0:6C:7C:C2:FB:4B:FC:51:F0:E7:3B:61:3D X509v3 Authority Key Identifier: keyid:EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:56:80:dd:26:43:2a:78:5f:d8:73:ca:6a:ab:97:14:f4:05: 15:1a:ac:15:c2:53:42:9d:b6:8f:36:fb:ac:45:c1:bc:67:66: 6a:1b:86:c0:cb:2f:9b:be:97:fd:4c:6a:e4:05:04:3c:a5:c3: 2f:6b:f0:2f:ec:95:f2:a8:60:1b:fb:c2:84:b7:0f:6d:e7:17: be:f0:ab:20:3d:64:21:dc:9a:a1:a0:e2:20:3e:5f:83:41:68: e5:d4:e7:1c:ef:3f:ee:2c:b2:18:80:de:67:0c:1f:db:da:5f: 90:94:84:c5:df:99:a9:1f:84:64:e1:ee:20:d3:97:e4:da:80: af:c3:83:42:33:e8:ae:c4:47:fc:34:ac:f3:91:62:1f:17:8c: 09:be:95:a5:bf:23:5d:05:35:02:25:9b:2a:5d:3d:65:b7:c3: 07:0d:c4:62:ce:a8:41:37:22:14:89:08:5d:bb:c5:1f:7f:81: 15:b5:e2:83:a7:2a:f4:f9:3f:a9:dd:00:0f:2e:b3:47:de:dd: 9f:29:52:fd:fb:04:26:8c:15:bb:14:a7:81:a9:3f:92:ee:5b: 3f:cf:54:d2:df:0e:c1:fc:9b:c0:e4:6b:2e:7e:ba:fd:6f:f1: 8e:da:8a:a7:da:bc:7f:f7:59:48:76:e8:ec:d7:53:a8:18:e2: 3b:b7:c9:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEOLXAUUuMFPGwvcndN1cvAHcuuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRC Q0Q5RUEyNjAeFw0yNTA2MzAyMzI2MTdaFw0yNTA3MDQwNzQ1MTdaMDMxMTAvBgNV BAMTKEVDRkZGNjNCRUM4QjE0QzA2QzdDQzJGQjRCRkM1MUYwRTczQjYxM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcnaDT+irK6ncJAReVblCavqI3 A1YNnGCYO3uacw13Roc8yJa+Oba3sJkXtd3lZPTzv9c7cul9zcwUpO64BfDAtiks ZLtjIGnuR8ldQ5sGtxuLezkGxN3UHuSDZe3gPyjMEnjgz//9smKocxlxxS+EZw+b RIuf2jQEQ/vF/77LJxC16rqOZhCC0pmtQ/n27SsI61wFWsl/X62Dvk78RLzx3FXn pApweagLpnqIHoEwkMS5GjoOAVaTlJobCfVT+DL1fZ1+343SUOXe9Sjf3+48v67f oIG+DD0vwroMUKZ3yYaLgwssM/FDewiWr/iSfFlQH0MVTShy0CrZSwAaZDIzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7P/2O+yLFMBsfML7S/xR8Oc7YT0wHwYDVR0j BBgwFoAU79IJGblvTjT6nkoMzCNHpLzZ6iYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWM0ODc1Ni1iNjYyLTQ2OGEtOTA2ZC02Y2Q0NjFjYjZlNDIvMC9FRkQyMDkxOUI5 NkY0RTM0RkE5RTRBMENDQzIzNDdBNEJDRDlFQTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRCQ0Q5 RUEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFjNDg3NTYtYjY2Mi00NjhhLTkw NmQtNmNkNDYxY2I2ZTQyLzAvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3 QTRCQ0Q5RUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9WgN0mQyp4X9hzymqrlxT0BRUarBXCU0Kd to82+6xFwbxnZmobhsDLL5u+l/1MauQFBDylwy9r8C/slfKoYBv7woS3D23nF77w qyA9ZCHcmqGg4iA+X4NBaOXU5xzvP+4sshiA3mcMH9vaX5CUhMXfmakfhGTh7iDT l+TagK/Dg0Iz6K7ER/w0rPORYh8XjAm+laW/I10FNQIlmypdPWW3wwcNxGLOqEE3 IhSJCF27xR9/gRW14oOnKvT5P6ndAA8us0fe3Z8pUv37BCaMFbsUp4GpP5LuWz/P VNLfDsH8m8Dkay5+uv1v8Y7aiqfavH/3WUh26OzXU6gY4ju3yWI= -----END CERTIFICATE-----Generated at Wed Jul 2 12:30:09 2025 by rpki-client